Seeing the recent question on Marks with IPv6 I went back to review a 
setup I'm currently testing.

In my tcrules file I have:

CONTINUE    $FW    -    -    -    -    -    !0x0

This generates the following mangle rule:

-A tcout -m mark ! --mark 0x0/0xff -j RETURN

But based on my config file:

TC_BITS=8
PROVIDER_BITS=8
PROVIDER_OFFSET=8
MASK_BITS=8
ZONE_BITS=0

Shouldn't that read:

-A tcout -m mark ! --mark 0x0/0xff00 -j RETURN

All the other mark "tests" specify a mask of 0xff00

Cheers.


------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to